SB20260928306 - Out-of-bounds write in Linux kernel soc sprd

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds write (CVE-ID: CVE-2026-97910)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to compromise confidentiality, integrity, and availability.

The vulnerability exists due to improper validation of buffer sizes in sprd_platform_compr_copy() in the ASoC sprd PCM compression driver when handling user-configured compression buffer parameters and write data. A local user can configure oversized compression buffer parameters and write data to overflow fixed IRAM or DDR buffer allocations.

The copy callback can be reached while the stream is in the setup state without starting it.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/38a9bb5221bcdece5507299f739c6751d8fc16b2
• https://git.kernel.org/stable/c/7a4ce92d150b9e7ecf1a710a34d8cdeb590d3751
• https://git.kernel.org/stable/c/8064b73997f137c00a7e2e38295a763f9423928b
• https://git.kernel.org/stable/c/ff63b0adc4f6a5b61c8393d204fac44c594c4d39